Wt

The child processes will disable behind reverse proxy and set 127.0.0.1 and ::1 as trusted proxies.

However, the parent process merely adds extra proxies to the X-Forwarded-For header. Any trusted proxies herein should still be considered trusted proxies by the child process.

The fix is to leave the behind reverse proxy option alone (the old behavior), and add 127.0.0.1 and ::1 to the existing list of reverse proxies.